
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
File: tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json)
Hash identifier: zPlbr35o7xlUOGxKUGhffmVfRImJ9FAoqCu0ra9lCLc=
Subject key identifier: 2B:05:B8:F8:CA:CA:3A:24:18:37:8F:D5:0E:E9:F5:0C:A4:FA:D7:F4
Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Certificate issuer: /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Certificate serial: 0FFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
Manifest number: 2E7D
Signing time: Sun 20 Sep 2026 16:40:43 +0000
Manifest this update: Sun 20 Sep 2026 16:40:42 +0000
Manifest next update: Sun 27 Sep 2026 16:40:42 +0000
Files and hashes: 1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: nnbRtNIR35cbV+o/NKbLs0qih+3fHLOMNgh1278fs+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4092 (0xffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Validity
Not Before: Sep 20 16:40:42 2026 GMT
Not After : Sep 27 16:40:42 2026 GMT
Subject: CN=6ab00c8b-0e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:36:33:cb:b2:7c:40:67:45:2d:88:1d:1f:
9c:65:d8:85:8a:65:c9:89:2c:74:3a:74:ca:4c:8f:
82:77:92:26:ef:9b:20:aa:a7:9c:50:62:7b:3a:62:
95:ad:95:94:b2:42:42:03:63:02:37:f4:01:43:b3:
31:0d:dc:85:92:9c:ef:80:de:3c:1b:08:5a:93:eb:
a6:2b:42:1a:62:d4:5d:29:af:c2:90:f8:66:be:06:
e1:7f:ef:c1:23:6d:1a:0a:dd:7e:f8:9f:a5:a6:26:
28:53:4d:a0:9e:d8:08:24:1d:12:89:a2:c0:89:ab:
c1:00:c5:23:c7:c7:f4:0c:8e:cf:e9:e1:94:05:d4:
9e:6f:aa:cb:22:68:76:86:3b:1d:2a:f9:7d:5b:c9:
14:09:42:fc:14:bb:a4:f9:9e:ac:e2:56:1d:68:52:
1d:8a:3a:3f:c0:41:5a:7b:7e:af:ac:a2:fe:0f:63:
6d:52:7a:c2:88:7f:24:1e:19:72:3e:7b:55:f3:07:
d9:8a:b7:ec:90:56:76:4a:8f:7c:df:83:29:f0:70:
14:e5:67:1e:7a:e9:79:fa:56:17:4d:28:07:7e:2d:
37:e8:6c:24:b1:e7:a7:90:cd:c4:e9:67:80:e9:f7:
59:84:48:f2:46:9b:8c:05:f2:1a:12:8f:0d:6e:c2:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:05:B8:F8:CA:CA:3A:24:18:37:8F:D5:0E:E9:F5:0C:A4:FA:D7:F4
X509v3 Authority Key Identifier:
keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:48:1d:d2:ce:a0:f5:13:e2:40:24:e0:66:f7:28:3d:50:d3:
dd:5a:9d:5d:78:89:bc:41:a8:f0:59:b6:7c:3c:18:42:1b:e9:
f6:ed:14:a0:31:52:fa:3e:14:8e:8f:28:c7:1b:16:eb:43:fa:
e3:25:46:1f:96:21:0a:90:67:55:31:c7:77:76:fc:61:03:a7:
8e:01:03:64:a9:86:64:63:81:ae:c1:1f:6f:1f:22:e2:93:cc:
7b:69:85:08:6c:36:07:59:6a:e8:83:d9:a8:11:83:32:d1:b9:
27:b9:e9:1a:83:54:0e:66:32:01:82:c7:cb:40:09:ac:79:76:
ee:ac:e2:06:9a:30:61:60:86:ce:d6:b1:20:06:34:fd:5f:b4:
b9:b4:67:8c:d6:53:b0:5d:ec:4a:d0:26:ce:b3:16:4b:74:76:
bd:b1:43:f4:ed:a2:b8:24:23:85:b7:83:ba:7a:04:6c:1a:2a:
de:3f:c4:ea:78:d9:f2:6a:bc:4b:af:43:80:b6:2c:44:5e:7b:
6c:01:31:df:d1:6d:2d:42:34:f0:f4:0d:69:97:bd:1b:10:81:
ae:2b:74:e3:35:88:e4:25:32:5d:cb:c2:df:60:36:12:60:8e:
9d:0e:91:4b:c8:84:4b:e8:33:43:f2:30:5c:b1:c7:86:68:c7:
c2:c4:4f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:42:10 2026 by rpki-client